On-Site Information Security Auditor — Midrand | Growth & Certifications

Placements24; Midrand; On-site; ZAR 480,000 - 760,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Annual leave

Professional development

Career progression

Job summary

Placements24 in Midrand, Gauteng is seeking a detail-oriented Information Security Auditor to join our established team. The role focuses on evaluating IT controls, risk management, and compliance with regulatory frameworks, and involves on-site auditing activities.

You will plan and execute audits, assess regulatory compliance (POPIA, ISO 27001, NIST), document findings, and collaborate with IT and business units to remediate issues. Strong writing and communication skills are essential.

Qualifications

• 3+ years in IT audit, information security, or risk management.
• Knowledge of COBIT, ISO 27001, and NIST.
• Data privacy regulations (POPIA).
• Experience with risk assessment methodologies and vulnerability tools.
• Strong analytical and detail orientation.
• Excellent report writing and documentation; stakeholder interaction.
• Professional certifications such as CISA, CRISC, or CISSP desirable.
• Ability to manage multiple audit engagements.

Responsibilities

• Plan and execute IT audits to evaluate internal controls and security processes.
• Assess compliance with regulations and internal policies.
• Identify security risks and vulnerabilities through audits, reviews and testing.
• Document audit findings, recommendations, and remediation plans clearly.
• Collaborate with IT and business units to remediate issues.
• Perform security assessments of third-party vendors and service providers.
• Stay up-to-date with evolving cybersecurity threats, risks and regulations.
• Prepare detailed audit reports for management and stakeholders.
• Develop and refine audit procedures and methodologies.
• Participate in security awareness training initiatives.

Skills

IT audit

Risk assessment

Compliance

Analytical thinking

Communication skills

Documentation

Team collaboration

Attention to detail

Education

Bachelor's degree in IT / Accounting / Auditing

Tools

COBIT

ISO 27001

NIST

POPIA

Vulnerability assessment tools

Job description

Placements24 in Midrand, Gauteng is seeking a detail-oriented Information Security Auditor to join our established team. The role focuses on evaluating IT controls, risk management, and compliance with regulatory frameworks, and involves on-site auditing activities.

You will plan and execute audits, assess regulatory compliance (POPIA, ISO 27001, NIST), document findings, and collaborate with IT and business units to remediate issues. Strong writing and communication skills are essential.